EU Flags Quantum Computing Risk as Threat to Financial System

The European Union's top financial regulators have flagged a potential risk to the EU financial system due to quantum computing. They have listed quantum alongside AI-driven cyber risk and private credit as emerging systemic threats.

The specific concern is 'harvest now, decrypt later' attacks, where adversaries may collect encrypted data and exposed public keys today, intending to decrypt them once a powerful enough quantum machine exists.

Banks, insurers, custodians, and any MiCA-licensed crypto asset service provider are required to use state-of-the-art cryptography against new threats under the EU's Digital Operational Resilience Act. The regulators have also recommended that member states adopt a post-quantum migration strategy by end-2026.

The science backing this warning is sharper than prior cycles, with Google Quantum AI estimating that breaking 256-bit elliptic-curve cryptography may require roughly 20 times fewer physical qubits than older models assumed. Coinbase is building post-quantum custody for $250 billion in institutional assets, and Ethereum has set a target of a quantum-resistant Layer 1 by December 2029.